CA ACF CA RS 1705 Service List

Transcription

1 CA ACF CA RS 1705 List Description Type RO92798 LDS SSL INIT FAILS W/CAS2386W PTF RO93394 ACF89001 VSAM I/O ERROR WITH SHARED DASD AND CACHE PTF RO93615 ABEND S0E0 IN SAFOEUSP ON A INIT_USP CALL PTF RO93881 USER ADDRESS SPACE RUNS OUT OF STORAGE AFTER RO92884 PTF RO94381 ACF2 IMS OPTS NONLIDDFT WITH LINK NOT WORKING PTF RO95082 ADD PKCS#7 & PKCS#12 CERTIFICATE DATE RANGE CHECKS *HIP/PRP* RO95192 MINDAYS NOT ENFORCED AT LOGON WITH PSWDENCT(AES2) PTF RO95203 ADD SAF LOG= VALUE AND USERNAME TO COMPLIANCE MANAGER RECORD PTF RO95218 Z/OS COMPATIBILITY CHANGES PTF RO95219 Z/OS COMPATIBILITY CHANGES PTF RO95456 ACF00SST ACF00SGP BAD MAIN_EP TO ACFFFTRT W/RO92884 PTF RO95459 SUPPORT OF IBM APAR OA50399 PTF RO95521 CIA LOAD FAILS BECAUSE OF INVALID DATA PTF RO95608 CICS: ACFM OD FUNCTIONS MESSAGE SHOWS RESIDUAL GARBAGE PTF RO95836 ACFRPTSL REPORT SHOWING MORE LIDS FIELDS THAN ACF COMMAND PTF RO95841 MSG ACF99058 INVALID DSN W/LONG-VALUE SYSTEM SYMBOLIC PTF The CA RS 1705 service count for this release is 16

2 CA ACF2 2 CA RS 1705 List for FMID Description Type RO92798 LDS SSL INIT FAILS W/CAS2386W PTF RO93394 ACF89001 VSAM I/O ERROR WITH SHARED DASD AND CACHE PTF RO93615 ABEND S0E0 IN SAFOEUSP ON A INIT_USP CALL PTF RO93881 USER ADDRESS SPACE RUNS OUT OF STORAGE AFTER RO92884 PTF RO95082 ADD PKCS#7 & PKCS#12 CERTIFICATE DATE RANGE CHECKS *HIP/PRP* RO95192 MINDAYS NOT ENFORCED AT LOGON WITH PSWDENCT(AES2) PTF RO95203 ADD SAF LOG= VALUE AND USERNAME TO COMPLIANCE MANAGER RECORD PTF RO95218 Z/OS COMPATIBILITY CHANGES PTF RO95456 ACF00SST ACF00SGP BAD MAIN_EP TO ACFFFTRT W/RO92884 PTF RO95459 SUPPORT OF IBM APAR OA50399 PTF RO95521 CIA LOAD FAILS BECAUSE OF INVALID DATA PTF RO95836 ACFRPTSL REPORT SHOWING MORE LIDS FIELDS THAN ACF COMMAND PTF RO95841 MSG ACF99058 INVALID DSN W/LONG-VALUE SYSTEM SYMBOLIC PTF The CA RS 1705 service count for this FMID is 13

3 CA ACF2 3 CA RS 1705 List for CAX1G03 FMID Description Type CAX1G03 RO95219 Z/OS COMPATIBILITY CHANGES PTF RO95608 CICS: ACFM OD FUNCTIONS MESSAGE SHOWS RESIDUAL GARBAGE PTF The CA RS 1705 service count for this FMID is 2

4 CA ACF2 4 CA RS 1705 List for CAX1G04 FMID Description Type CAX1G04 RO94381 ACF2 IMS OPTS NONLIDDFT WITH LINK NOT WORKING PTF The CA RS 1705 service count for this FMID is 1

5 CA ACF CA RS PTF RO92798 RO92798 RO92798 M.C.S. ENTRIES = ++PTF (RO92798) LDS SSL INIT FAILS W/CAS2386W When LDS is configured to use SSL the initialization process may fail with message: CAS2386W SSL Certificate not found for LDAP node: LDAP.xxxxxxxx Label: lll where 'xxxxxxxx' is the LDAP record qualifier and 'lll' is the label spacified in the LDSLABEL parameter of that record. Message CAS2386W is issued when LDS initializes. ACFRPTOM reports a failed R_datalib event with codes 8/8:44. LDS starts up but SSL will not function. Specify a 32-byte label in the LDSLABEL parameter of the LDAP node record, change the corresponding CERTDATA record LABEL parameter to match the 32-byte LDSLABEL value, then stop and start LDS. CA-ACF2-MVS Version 15.0 CA-ACF2-MVS Version 16.0 ACF2MS 9943 Copyright (C) 2017 CA. All rights reserved. R00199-ACF160-SP1 DESC(LDS SSL INIT FAILS W/CAS2386W FMID () SUP ( TR92798 ) ++HOLD (RO92798) SYSTEM FMID() REASON (DYNACT ) DATE (17116) CA-ACF2-MVS Version 16.0 PURPOSE Activate change without IPL USERS LDS users KNOWLEDGE Operator commands ACCESS z/os Operator console 1. LLA refresh 2. F ACF2,LDS(STOP) 3. F ACF2,LDS(START)

6 CA ACF CA RS PTF RO93394 RO93394 RO93394 M.C.S. ENTRIES = ++PTF (RO93394) ACF89001 VSAM I/O ERROR WITH SHARED DASD AND CACHE The ACF89001 VSAM I/O error can happen when running with the ACF2 database in a shared environment and multiple systems are trying to delete the same record at the same time. This is a timing problem and can only happen when the ACF CACHE feature is active. ACF89001 VSAM I/O ERROR - RTN: xxxxxxxx DISP: xxxx RET: 8 FDBK: 16 None, the record that was being deleted was actually deleted by the other system. The message is just informational in this case. Only delete the record from one of the systems. PRODUCT(S) AFFECTED: CA-ACF2-MVS Release 15.0 CA-ACF2-MVS Version 16.0 ACF2MS 9946 Copyright (C) 2017 CA. All rights reserved. R00211-ACF160-SP1 DESC(ACF89001 VSAM I/O ERROR WITH SHARED DASD AND CACHE FMID () SUP ( RO92536 TR92536 TR93394 ) ++HOLD (RO93394) SYSTEM FMID() REASON (IPL ) DATE (17116) CA-ACF2-MVS Version 16.0 PURPOSE Activate change KNOWLEDGE Operator commands ACCESS z/os Operator console 1. IPL CLPA

7 CA ACF CA RS PTF RO93615 RO93615 RO93615 M.C.S. ENTRIES = ++PTF (RO93615) ABEND S0E0 IN SAFOEUSP ON A INIT_USP CALL There is a possibility of getting an S0E0 ABEND in SAFOEUSP when processing an initusp event. The problem occurs when SAFOEUSP references storage while in access register mode without restoring access registers AR14 and AR15 following a GETMAIN that modified them. CCSR010E SAFOEUSP S0E0 at 217DC3FA LMOD SAFOEDRV CSECT SAFOEUSP +000D52 The INIT_USP call fails None PRODUCT(S) AFFECTED: CA-ACF2-MVS CA-ACF2-MVS Release 15.0 CA-ACF2-MVS Release 16.0 ACF2MS 9958 Copyright (C) 2017 CA. All rights reserved. R00222-ACF160-SP1 DESC(ABEND S0E0 IN SAFOEUSP ON A INIT_USP CALL FMID () PRE ( RO80764 RO84556 ) SUP ( RO86681 TR86681 TR93615 ) ++HOLD (RO93615) SYSTEM FMID() REASON (DYNACT ) DATE (17096) CA-ACF2-MVS Version 16.0 PURPOSE Activate change without IPL KNOWLEDGE Operator commands ACCESS z/os Operator console 1. LLA Refresh 2. Execute console command 'F ACF2,NEWMOD(SAFOEDRV)'

8 CA ACF CA RS PTF RO93881 RO93881 RO93881 M.C.S. ENTRIES = ++PTF (RO93881) USER ADDRESS SPACE RUNS OUT OF STORAGE AFTER RO92884 Problem Description: There is a chance of running out of below the line storage in a users address space when running with our MFA support fix RO This would only happen at sites that have set up and are using our MFA support. We are orphaning 1k bytes of storage in subpool=229, key=0 storage below the line storage. Excessive storage utilization including SA0A and S878 abends associated with out of storage condition. Sites using the MFA support may have address spaces that run out of user storage and have to be cancelled. None PRODUCT(S) AFFECTED: CA-ACF2-MVS Version 16.0 ACF2MS 9961 Copyright (C) 2017 CA. All rights reserved. R00231-ACF160-SP1 DESC(USER ADDRESS SPACE RUNS OUT OF STORAGE AFTER RO92884 FMID () PRE ( RO92884 ) SUP ( TR93881 ) ++HOLD (RO93881) SYSTEM FMID() REASON (DYNACT ) DATE (17109) CA-ACF2-MVS Version 16.0 PURPOSE Activate change without an IPL KNOWLEDGE Operator commands ACCESS z/os Operator console 1. F LLA,REFRESH 2. F ACF2,NEWMOD(SAFOEDRV)

9 CA ACF CA RS PTF RO94381 RO94381 RO94381 M.C.S. ENTRIES = ++PTF (RO94381) ACF2 IMS OPTS NONLIDDFT WITH LINK NOT WORKING Resources that are accessed by systems across an MSC or ISC communications link or through IMS OTMA clients may be validated using the ACF2 IMS Default Logonid or the link default Logonid (when the ACF2 IMS LINK record specifies a default Logonid) even when the ACF2 IMS OPTS record specifies NONLIDDFLT. Transactions and commands that should fail may get validated using the ACF2 IMS default Logonid or the link default Logonid. Access may be inadvertently granted to the resource, depending on the rule. Remove the default Logonids from the ACF2 IMS OPTS and LINK records, or ensure there are no rules inadvertently permitting access to any of the default Logonids. PRODUCT(S) AFFECTED: CA-ACF2-MVS Release 15.0 CA-ACF2-MVS Version 16.0 ACF2MS 9967 Copyright (C) 2017 CA. All rights reserved. R00238-ACF160-SP1 DESC(ACF2 IMS OPTS NONLIDDFT WITH LINK NOT WORKING FMID (CAX1G04) PRE ( RO87169 ) SUP ( TR94381 ) ++HOLD (RO94381) SYSTEM FMID(CAX1G04) REASON (DYNACT ) DATE (17095) CA-ACF2-MVS IMS Version 16.0 PURPOSE Activate change without IPL KNOWLEDGE Operator commands ACCESS z/os Operator console 1. Restart IMS

10 CA ACF CA RS PTF RO95082 RO95082 RO95082 M.C.S. ENTRIES = ++PTF (RO95082) ADD PKCS#7 & PKCS#12 CERTIFICATE DATE RANGE CHECKS When ACF2 builds the chain of CA certificates that will be included in a PKCS#12 or PKCS#7 package it does not check whether the validity dates (active and expire) of each certificate in the chain fall within the signing certificate's validity date range. This can result in the creation of an invalid PKCS#12 or PKCS#7 package. One known symptom of this problem is that an INSERT of a PKCS#12 or PKCS#7 package can inadvertently modify the TRUST status of one or more of the CA certificates in the package when the CA certificates already exist in the ACF2 database. Changing the CA certificate from TRUST to NOTRUST will prevent it from being returned via the R_datalib callable service when callers retrieve certificates from a keychain. This missing CA certificate can cause SSL/TLS connections to fail. Specify TRUST on the INSERT command PRODUCT(S) AFFECTED: ACF2MS CA-ACF2-MVS Version 16.0 ACF2MS 9978 Copyright (C) 2017 CA. All rights reserved. R00249-ACF160-SP1 DESC(ADD PKCS#7 & PKCS#12 CERTIFICATE DATE RANGE CHECKS FMID () PRE ( RO84877 RO86888 RO89039 RO89501 RO92884 ) SUP ( CC87799 KC87799 RO87221 RO89116 RO94309 RO95058 TR87221 TR89116 TR94309 TR95058 TR95082 ) ++HOLD (RO95082) SYSTEM FMID() REASON (DYNACT ) DATE (17108) CA-ACF2-MVS Version 16.0 PURPOSE Activate change without IPL KNOWLEDGE Operator commands ACCESS z/os Operator console 1. LLA Refresh 2. Execute console command 'F ACF2,NEWMOD(SAFCRCTS)' 3. Execute console command 'F ACF2,NEWMOD(SAFCR712)' 4. Execute console command 'F ACF2,NEWMOD(SAFOEDRV)' 5. Execute console command 'F ACF2,NEWMOD(SAFRT003)' 6. Execute console command 'F ACF2,NEWMOD(ACF00SVA)'

11 CA ACF CA RS PTF RO95192 RO95192 RO95192 M.C.S. ENTRIES = ++PTF (RO95192) MINDAYS NOT ENFORCED AT LOGON WITH PSWDENCT(AES2) When one of the advanced Password encryption algorithms (AES1 OR AES2) is specified in the PSWD record PSWDENCT parameter the MINDAYS check at LOGON may not effectively prevent the user from changing his password. Password change allowed at LOGON contrary to MINDAYS specification. Password change allowed at LOGON contrary to MINDAYS specification. None. ACF2MS 9975 Copyright (C) 2017 CA. All rights reserved. R00254-ACF160-SP1 DESC(MINDAYS NOT ENFORCED AT LOGON WITH PSWDENCT(AES2) FMID () PRE ( RO80625 RO84877 RO84952 RO89360 RO91120 RO92400 RO92884 ) SUP ( RO91396 TR91396 TR95192 ) ++HOLD (RO95192) SYSTEM FMID() REASON (DYNACT ) DATE (17082) CA-ACF2-MVS Version 16.0 PURPOSE Enable change without an IPL KNOWLEDGE z/os Console commands ACCESS z/os Console 1. LLA Refresh 2. Console command: F ACF2,NEWMOD(ACF00SVA)

12 CA ACF CA RS PTF RO95203 RO95203 RO95203 M.C.S. ENTRIES = ++PTF (RO95203) ADD SAF LOG= VALUE AND USERNAME TO COMPLIANCE MANAGER RECORD ENHANCEMENT DESCRIPTION: Update records sent to Compliance Manager with three new fields. 1. The LOG= value on SAF calls for the following records Signon 12 - Signon Violation 21 - Object Access Unaudited 22 - Object Access Audited 23 - Object Access Violation 2. The username value for the following records Signon 12 - Signon Violation 13 - Signoff 21 - Object Access Unaudited 22 - Object Access Audited 23 - Object Access Violation 31 - Account Administration 32 - Account Administration Violation 41 - Policy Administration 42 - Policy Administration Violation 51 - Other Administration 52 - Other Administration Violation 3. The UID string of the user for the following records Object Access Unaudited 22 - Object Access Audited 23 - Object Access Violation PRODUCT(S) AFFECTED: CA-ACF2-MVS Version 16.0 CA-ACF2-MVS Version 15.0 ACF2MS 9947 Copyright (C) 2017 CA. All rights reserved. R00255-ACF160-SP1 DESC(ADD SAF LOG= VALUE AND USERNAME TO COMPLIANCE MANAGER RECORD FMID () PRE ( RO80625 RO84877 RO84952 RO89360 RO91120 RO91169 RO92400 RO92884 ) SUP ( RO86546 RO91396 RO95192 TR86546 TR91396 TR92183 TR93345 TR95192 TR95203 )

13 CA ACF CA RS PTF RO95218 RO95218 RO95218 M.C.S. ENTRIES = ++PTF (RO95218) Z/OS COMPATIBILITY CHANGES There are various messages and abends that occur during an ipl with z/os 2.3. This apar will provide a site the compatibility to run ACF2 r16 on a z/os 2.3 system. ACF89810 UNABLE TO IMPLANT DELETE CDE HOOK ACF8E100 - MAINTENANCE REQUIRED FOR VTAM RELEASE VE623 S0E0-2D abends Cannot IPL None PRODUCT(S) AFFECTED: CA-ACF2-MVS Version 16.0 ACF2MS 9942 Copyright (C) 2017 CA. All rights reserved. R00258-ACF160-SP1 DESC(Z/OS COMPATIBILITY CHANGES FMID () PRE ( RO80625 RO80764 RO82764 RO84555 RO84556 RO84559 RO84842 RO84877 RO84952 RO85648 RO85672 RO87013 RO88717 RO89039 RO89442 RO89501 RO89602 RO91913 RO92884 RO94599 ) SUP ( AC87799 RO82610 RO85021 RO86545 RO86551 RO86681 RO86762 RO87685 RO89117 RO89120 RO90049 RO93442 RO93615 TR82610 TR85021 TR86545 TR86551 TR86681 TR86762 TR87685 TR89117 TR89120 TR90049 TR93442 TR93615 TR95218 ) ++IF FMID(CAX1G03) REQ(RO95219 ). ++HOLD (RO95218) SYSTEM FMID() REASON (DYNACT ) DATE (17108) CA-ACF2-MVS Version 16.0 PURPOSE Activate change without IPL KNOWLEDGE Operator commands ACCESS z/os Operator console 1. Refresh LLA 2. Restart CICS ++HOLD (RO95218) SYSTEM FMID() REASON (IPL ) DATE (17108) CA-ACF2-MVS Version 16.0

14 CA ACF CA RS PTF RO95218 PURPOSE Activate change KNOWLEDGE Operator commands ACCESS z/os Operator console 1. IPL CLPA

15 CA ACF CA RS PTF RO95219 RO95219 RO95219 M.C.S. ENTRIES = ++PTF (RO95219) Z/OS COMPATIBILITY CHANGES There are various messages and abends that occur during an ipl with z/os 2.3. This apar will provide a site the compatibility to run ACF2 r16 on a z/os 2.3 system. ACF89810 UNABLE TO IMPLANT DELETE CDE HOOK ACF8E100 - MAINTENANCE REQUIRED FOR VTAM RELEASE VE623 S0E0-2D abends Cannot IPL None PRODUCT(S) AFFECTED: CA-ACF2-MVS Version 16.0 ACF2MS 9942 Copyright (C) 2017 CA. All rights reserved. R00258-ACF160-SP1 DESC(Z/OS COMPATIBILITY CHANGES FMID (CAX1G03) SUP ( TR93447 TR93618 TR94617 TR95219 ) ++IF FMID() REQ(RO95218 ). ++HOLD (RO95219) SYSTEM FMID(CAX1G03) REASON (DYNACT ) DATE (17108) CA-ACF2-MVS CICS Version 16.0 PURPOSE Activate change without IPL KNOWLEDGE Operator commands ACCESS z/os Operator console 1. Refresh LLA 2. Restart CICS ++HOLD (RO95219) SYSTEM FMID(CAX1G03) REASON (IPL ) DATE (17108) CA-ACF2-MVS CICS Version 16.0 PURPOSE Activate change

16 CA ACF CA RS PTF RO95219 KNOWLEDGE Operator commands ACCESS z/os Operator console 1. IPL CLPA

17 CA ACF CA RS PTF RO95456 RO95456 RO95456 M.C.S. ENTRIES = ++PTF (RO95456) ACF00SST ACF00SGP BAD MAIN_EP TO ACFFFTRT W/RO92884 The ACFSGRP support routine to search the source group cross reference table is an ALIAS to the ACF00SGP Load Module. After installation of PTF RO92884, the MAIN_EP of ACF00SGP changes to the non-executable CSECT ACFFFTRT. Clients invoking the support routine without using the ALIAS may experience S0C1 abends due to the incorrect entry point. Vary depending in client use of the support routine. Varies depending in client use of the support routine. Use of the ACFSGRP ALIAS ACF2MS 9987 Copyright (C) 2017 CA. All rights reserved. R00262-ACF160-SP1 DESC(ACF00SST ACF00SGP BAD MAIN_EP TO ACFFFTRT W/RO92884 FMID () SUP ( TR95456 ) ++HOLD (RO95456) SYSTEM FMID() REASON (DYNACT ) DATE (17097) CA-ACF2-MVS Version 16.0 PURPOSE Dynamically implement change USERS All users referencing ACF00SGP Load Module KNOWLEDGE z/os Console commands ACCESS z/os Console 1. LLA Refresh 2. Varies depending on local use of ACF00SGP Load Module

18 CA ACF CA RS PTF RO95459 RO95459 RO95459 M.C.S. ENTRIES = ++PTF (RO95459) SUPPORT OF IBM APAR OA50399 SUPPORT OF IBM APAR OA50399 None None None ACF2MS 9983 Copyright (C) 2017 CA. All rights reserved. R00263-ACF160-SP1 DESC(SUPPORT OF IBM APAR OA50399 FMID () SUP ( TR95459 ) ++HOLD (RO95459) SYSTEM FMID() REASON (IPL ) DATE (17097) CA-ACF2-MVS Version 16.0 PURPOSE Activate change KNOWLEDGE z/os IPL ACCESS z/os Console 1. IPL with CLPA

19 CA ACF CA RS PTF RO95521 RO95521 RO95521 M.C.S. ENTRIES = ++PTF (RO95521) CIA LOAD FAILS BECAUSE OF INVALID DATA Loading a CIA database in DB2 can fail if the ACF2 security database contain invalid data for certain fields. This can occur when logonids exist prior to new fields being added and these fields have never been updated. The CIA load fails when the fields that contain the invalid data are required to be in a certain format like DATES and TIMES. The CIA LOAD job can fail with messages similar to: DSNU334I... INPUT FIELD 'PSWDITIM' INVALID FOR 'CIADB01.USERACF2' ERROR CODE '13 - INPUT OUT OF RANGE FOR DATE/TIME' The database LOAD will fail. If the invalid data is removed, the LOAD can be completed. It is possible to do this by: - Modifying the Logonids with invalid data. It may be necessary to delete and reinsert the Logonids to remove the invalid data. - Edit the CIA unload data set replacing the invalid data with valid data. This must be done carefully to not change the position of any fields in this data set. PRODUCT(S) AFFECTED: CA-ACF2-MVS Release 15.0 CA-ACF2-MVS Version 16.0 ACF2MS 9986 Copyright (C) 2017 CA. All rights reserved. R00266-ACF160-SP1 DESC(CIA LOAD FAILS BECAUSE OF INVALID DATA FMID () PRE ( RO84877 ) SUP ( RO90077 TR90077 TR95521 ) ++HOLD (RO95521) SYSTEM FMID() REASON (DYNACT ) DATE (17114) CA-ACF2-MVS Version 16.0 PURPOSE Generate new CIA LOAD data without invalid data. USERS CA ACF2 users that may have invalid data in their AFFECTED LOGONID database because of fields that were added after some LOGONIDs were created. KNOWLEDGE CIA Unload and LOAD processes. ACCESS The authority to run the CIA UNLOAD and LOAD jobs. Rerun the CIAUNLD job to obtain the CIA data with invalid dates and times removed. The invalid data is removed from the CIA unload data set but the CA ACF2 LOGONID database is not modified.

20 CA ACF CA RS PTF RO95608 RO95608 RO95608 M.C.S. ENTRIES = ++PTF (RO95608) CICS: ACFM OD FUNCTIONS MESSAGE SHOWS RESIDUAL GARBAGE Some functions of the ACFM OD Function display the notice: NOTE: NOTHING ON THIS PANEL MAY BE MODIFIED BY FUNCTION 'OM'. There may be some residual data at the end of this display from the message that is produced by validation of menu options but the ACF2CTRL USERKEY is not defined: ACFAE911 Resource ACF2CTRL not defined to CA ACF2 CICS Interface This results in the display: NOTE: NOTHING ON THIS PANEL MAY BE MODIFIED BY FUNCTION 'OM'.ace Cosmetic None Define the ACF2CTRL USERKEY per supplied sample ACF2PARM parms. ACF2MS 9993 Copyright (C) 2017 CA. All rights reserved. R00271-ACF160-SP1 DESC(CICS: ACFM OD FUNCTIONS MESSAGE SHOWS RESIDUAL GARBAGE FMID (CAX1G03) PRE ( RO85868 ) SUP ( TR95608 ) ++HOLD (RO95608) SYSTEM FMID(CAX1G03) REASON (DYNACT ) DATE (17109) CA-ACF2-MVS CICS Version 16.0 PURPOSE Install update without CICS region recycle KNOWLEDGE CICS CEMT transaction ACCESS CICS Region REQUIRED CICS CEMT transaction 1. CEMT SET PROG(ACFAEMTP) NEWCOPY

21 CA ACF CA RS PTF RO95836 RO95836 RO95836 M.C.S. ENTRIES = ++PTF (RO95836) ACFRPTSL REPORT SHOWING MORE LIDS FIELDS THAN ACF COMMAND The ACFRPTSL report output is suppose to display the same fields in a logonid that are displayed if the user had displayed the logonid through the ACF command. The current ACFRPTSL report is not checking the authority of the user for each field in the logonid when displaying the logonid. Therefore the user may see more fields displayed in the ACFRPTSL output then they would see listing the logonid through the ACF command. ACFRPTSL not checking users authority to each logonid field when displaying the output for the report. May see fields that the user is not authorized to see. None PRODUCT(S) AFFECTED: CA-ACF2-MVS Release 15.0 CA-ACF2-MVS Version 16.0 ACF2MS 9922 Copyright (C) 2017 CA. All rights reserved. R00278-ACF160-SP1 DESC(ACFRPTSL REPORT SHOWING MORE LIDS FIELDS THAN ACF COMMAND FMID () SUP ( RO81599 TR81599 TR95836 ) ++HOLD (RO95836) SYSTEM FMID() REASON (DYNACT ) DATE (17114) CA-ACF2-MVS Version 16.0 PURPOSE Activate change without IPL KNOWLEDGE Operator commands ACCESS z/os Operator console 1. F LLA,REFRESH

22 CA ACF CA RS PTF RO95841 RO95841 RO95841 M.C.S. ENTRIES = ++PTF (RO95841) MSG ACF99058 INVALID DSN W/LONG-VALUE SYSTEM SYMBOLIC If a dataset name contains a system Symbolic and the value of the symbolic is longer than the symbolic itself, the substitution may not be completed correctly. This leads to validation of the DSN containing the symbolic, which is incorrect, and may cause an Invalid Dataset name error. Message: ACF99058 INVALID DSN dsn OR LIB SYS1.LINKLIB Incorrect DSN validation None ACF2MS 9997 Copyright (C) 2017 CA. All rights reserved. R00279-ACF160-SP1 DESC(MSG ACF99058 INVALID DSN W/LONG-VALUE SYSTEM SYMBOLIC FMID () SUP ( TR95841 ) ++HOLD (RO95841) SYSTEM FMID() REASON (IPL ) DATE (17117) CA-ACF2-MVS Version 16.0 PURPOSE Install program change KNOWLEDGE IPL ACCESS IPL 1. IPL with CLPA to activate program change

23 CA ACF CA RS 1705 Product/Component Listing Product Family Product Release Security CA-ACF2-MVS CA MAINFRAME ADVANCED AUTHENTICATION The CA RS 1705 Product/Component Count for this release is 2

24 CA ACF All CA RS Levels List CA RS Level FMID CAR1705 RO95841 RO95836 RO95608 RO95521 RO95459 RO95456 RO95219 RO95218 RO95203 RO95192 RO95082 RO94381 RO93881 RO93615 RO93394 RO92798 CAX1G03 CAX1G03 CAX1G04 CAR1704 RO95320 CAX1G03 RO95173 RO95168 RO95122 RO95058 RO94877 RO94841 RO94796 RO94697 RO94599 RO94543 RO94309 RO93699 RO93380 RO91983 CAX1G03 CAR1703 RO94325 RO94125 RO93581 CAR1702 RO93738 RO93181 CAX1G03 CAR1701 RO93554 RO93442 RO93377 RO93303 RO93301 RO93240 RO92540 RO92536 CAR1612 RO93116 RO93003 RO92884 RO91980 RO91338 RO91271 RO91194 RO91069 CAX1G03 CAX1G02 CAR1611 RO92541 RO92424 RO92400

25 CA ACF All CA RS Levels List CA RS Level FMID RO92311 RO91913 RO90077 CAR1610 RO92184 RO92080 RO91962 RO91939 RO91578 RO91396 RO90020 RO90019 RO89873 RO88622 CAX1G03 CAX1G03 CAX1G05 CAX1G05 CAX1G05 CAR1609 RO91401 RO91270 RO91169 RO91121 RO91120 RO89763 CAX1G01 CAR1607 RO90749 RO90415 CAX1G03 CAR1606 RO90049 RO89700 RO89501 RO89393 RO89101 RO89039 CAX1G03 CAR1605 RO89649 CAX1G03 RO89603 RO89602 RO89442 RO89397 RO89396 RO89360 RO89274 RO89222 RO88971 RO88719 RO88654 RO88324 RO88106 RO87944 RO87169 RO86948 CAX1G03 CAX1G03 CAX1G04 CAR1604 RO89184 CAX1G03 RO89120 RO89117 RO89116 RO88717 RO88240 RO87405 RO87013 RO86545 CAR1603 RO88319 CAX1G03 RO87790

26 CA ACF All CA RS Levels List CA RS Level FMID RO86551 RO86548 RO86546 CAR1602 RO87685 RO87221 RO86888 RO86762 RO86681 RO86542